Hi All Can anyone explain why a machine on 10.0.0.10/24 would try and communicate with another machine 10.0.0.4/24 via a router? Mar 1 14:19:37 firefly kernel: DROP FORWARD INTERNAL: IN=eth2 OUT=eth2 SRC=10.0.0.10 DST=10.0.0.4 LEN=48 TOS=0x00 PREC=0x00 TTL=127 ID=17562 DF PROTO=TCP SPT=4601 DPT=159 WINDOW=64240 RES=0x00 SYN URGP=0 Mar 1 14:19:37 firefly kernel: DROP FORWARD INTERNAL: IN=eth2 OUT=eth2 SRC=10.0.0.10 DST=10.0.0.4 LEN=48 TOS=0x00 PREC=0x00 TTL=127 ID=17563 DF PROTO=TCP SPT=4602 DPT=158 WINDOW=64240 RES=0x00 SYN URGP=0 Mar 1 14:19:40 firefly kernel: DROP FORWARD INTERNAL: IN=eth2 OUT=eth2 SRC=10.0.0.10 DST=10.0.0.4 LEN=48 TOS=0x00 PREC=0x00 TTL=127 ID=17593 DF PROTO=TCP SPT=4601 DPT=159 WINDOW=64240 RES=0x00 SYN URGP=0 What is this? Port 158 and 159 apparently belong to BackupExec/NetBackup. 10.0.0.10 is our backup server, but why does it try and talk to 10.0.0.4 via the default router? -- -- Raymond Leach <raymondl@xxxxxxxxxxxxxxxxxxxxxx> Network Support Specialist http://www.knowledgefactory.co.za "lynx -source http://www.rchq.co.za/raymondl.asc | gpg --import" Key fingerprint = 7209 A695 9EE0 E971 A9AD 00EE 8757 EE47 F06F FB28 --
Attachment:
signature.asc
Description: This is a digitally signed message part
